Static task
static1
Behavioral task
behavioral1
Sample
NEAS.29b0529be657dbcb0b7e20cbd2bbd1c0_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.29b0529be657dbcb0b7e20cbd2bbd1c0_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.29b0529be657dbcb0b7e20cbd2bbd1c0_JC.exe
-
Size
358KB
-
MD5
29b0529be657dbcb0b7e20cbd2bbd1c0
-
SHA1
25330f47b9a4c72bd429c9e84bb01c66837159a6
-
SHA256
f2b133efa8f3fbbb711be5ab45db190354c56011f5785baf57366aa0c3a56e26
-
SHA512
059b696472cc7691808a48c67f13177b38b2ca84baf02ac7d3a796ecfc84789471e3bdee907631266cbb3de445378a51087a9a122f942b4bd64bc918fa1b79ff
-
SSDEEP
6144:9rTfUHeeSKOS9ccFKk3Y9t9YI3izFVQs6sYUQ4YDn/H5:9n8yN0Mr8IyzILR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.29b0529be657dbcb0b7e20cbd2bbd1c0_JC.exe
Files
-
NEAS.29b0529be657dbcb0b7e20cbd2bbd1c0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
FKP0 Size: - Virtual size: 18.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FKP1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE